Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918C1BD6E9B511EFA5A209AC762E951A.roa
File: 918C1BD6E9B511EFA5A209AC762E951A.roa (raw, json)
Hash identifier: 3qzGMJlL6MP2RZPDGtB1wH43NguoFtvUMC0y3SZFdGs=
Subject key identifier: B8:2B:63:D1:61:E7:D4:F3:80:B0:EE:25:14:49:D3:56:AC:A0:24:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918C1BD6E9B511EFA5A209AC762E951A.roa
Signing time: Thu 13 Feb 2025 02:52:31 +0000
ROA not before: Thu 13 Feb 2025 02:52:27 +0000
ROA not after: Wed 31 Dec 2025 02:52:27 +0000
asID: 17561
IP address blocks: 156.236.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74152 (0x121a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:52:27 2025 GMT
Not After : Dec 31 02:52:27 2025 GMT
Subject: CN=67ad5e6f-6182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:c6:0b:0c:95:e5:91:2e:ec:03:4f:89:f7:
34:53:bd:36:bd:46:89:be:35:40:0d:ac:80:e5:e3:
7a:32:50:3a:48:02:24:9a:1b:0c:28:37:b1:84:61:
3e:01:6a:9c:6b:48:99:07:0d:b8:c6:e4:4a:44:27:
5a:92:09:07:68:2d:a9:2a:84:f6:fb:6f:b1:6a:e0:
07:1a:4b:e8:2c:a5:c8:c3:f0:ca:7b:16:d9:ed:0a:
13:36:6b:6f:80:05:57:ad:3c:ec:35:a2:43:e6:d3:
dc:00:14:33:58:21:6c:4a:88:e0:a9:f5:55:05:bf:
93:77:86:a1:d4:6d:a4:9a:e7:f4:2f:c3:40:72:98:
8a:81:1f:c1:50:a6:56:1c:94:7d:57:5a:ae:81:b5:
c1:6d:56:c2:cf:cd:7b:f0:02:7e:9e:7d:1b:76:84:
dd:00:6a:43:0e:47:45:24:86:48:65:e3:0d:47:18:
48:93:df:84:3a:9b:2e:d1:66:e9:c3:54:1d:a4:77:
1f:15:92:53:07:ca:39:bc:d5:8d:f8:35:e7:4e:f2:
20:33:32:e4:9f:e7:33:0e:05:5d:1b:74:17:86:4e:
b3:48:47:69:c3:67:b9:06:1d:c8:e4:34:8b:ac:fa:
1e:e5:ee:78:57:55:c7:1e:b2:5d:af:f6:97:fb:6d:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:63:D1:61:E7:D4:F3:80:B0:EE:25:14:49:D3:56:AC:A0:24:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918C1BD6E9B511EFA5A209AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7d:0f:d5:a1:0d:3e:71:16:60:82:4d:1c:ec:3a:5e:c3:f3:
64:f8:4b:7f:50:92:db:69:04:50:fa:d3:f4:71:30:04:62:c5:
a8:c4:e3:ef:33:7b:ce:29:ea:14:d6:a5:17:42:64:61:8a:38:
54:b5:d6:92:13:11:81:17:17:fd:1d:69:7d:a9:68:44:79:fc:
1d:f2:a1:85:bf:00:94:40:a3:be:11:70:cb:e5:cb:91:63:b9:
07:e2:6c:e2:31:0e:4b:be:11:43:f9:95:21:d6:28:66:53:1c:
c7:66:b5:e2:71:61:ba:5c:72:c2:6e:32:ad:d8:ca:58:86:07:
99:f7:11:2c:19:25:70:35:c5:31:82:76:80:88:ba:3b:01:4c:
69:47:9a:fb:6a:09:7e:65:a8:4a:42:a6:18:47:e6:37:59:c2:
c6:a9:0e:5a:91:ea:e4:94:a2:85:8e:cd:69:e4:cc:98:17:51:
f6:f3:03:32:47:55:43:bb:be:dc:4b:17:05:a8:8d:5e:63:e8:
66:ad:37:8c:6b:db:bd:b6:08:70:89:67:bd:1c:82:17:f3:a9:
65:c8:53:fc:22:60:84:19:05:f1:d7:63:61:41:50:ab:6c:89:
49:b1:72:41:53:5e:62:7e:82:a5:83:6b:ae:e0:e0:1c:e8:f8:
db:5f:52:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASGoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjEzMDI1MjI3WhcNMjUxMjMxMDI1MjI3WjAYMRYw
FAYDVQQDEw02N2FkNWU2Zi02MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArE3GCwyV5ZEu7ANPifc0U702vUaJvjVADayA5eN6MlA6SAIkmhsMKDex
hGE+AWqca0iZBw24xuRKRCdakgkHaC2pKoT2+2+xauAHGkvoLKXIw/DKexbZ7QoT
NmtvgAVXrTzsNaJD5tPcABQzWCFsSojgqfVVBb+Td4ah1G2kmuf0L8NAcpiKgR/B
UKZWHJR9V1qugbXBbVbCz8178AJ+nn0bdoTdAGpDDkdFJIZIZeMNRxhIk9+EOpsu
0Wbpw1QdpHcfFZJTB8o5vNWN+DXnTvIgMzLkn+czDgVdG3QXhk6zSEdpw2e5Bh3I
5DSLrPoe5e54V1XHHrJdr/aX+23b2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLgr
Y9Fh59TzgLDuJRRJ01asoCQ+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MThDMUJENkU5QjUxMUVGQTVBMjA5QUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwjMA0GCSqGSIb3DQEBCwUA
A4IBAQBrfQ/VoQ0+cRZggk0c7Dpew/Nk+Et/UJLbaQRQ+tP0cTAEYsWoxOPvM3vO
KeoU1qUXQmRhijhUtdaSExGBFxf9HWl9qWhEefwd8qGFvwCUQKO+EXDL5cuRY7kH
4mziMQ5LvhFD+ZUh1ihmUxzHZrXicWG6XHLCbjKt2MpYhgeZ9xEsGSVwNcUxgnaA
iLo7AUxpR5r7agl+ZahKQqYYR+Y3WcLGqQ5akerklKKFjs1p5MyYF1H28wMyR1VD
u77cSxcFqI1eY+hmrTeMa9u9tghwiWe9HIIX86llyFP8ImCEGQXx12NhQVCrbIlJ
sXJBU15ifoKlg2uu4OAc6PjbX1K3
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:01 2025 by rpki-client